After installing drupalwxt/wxt 5.3.0, I noticed that Group, which is one of the projects dependencies, is currently locked at version 2.2.2 in the composer.json file.
Group 2.2.2 is no longer supported, and is no longer covered by the security advisory policy.
I would like to propose updating the Group project dependency from version 2.2.2 to 2.3.0.
Group 2.3.0 is covered by the security advisory policy and requires Drupal core version 10.3.x. Drupal WXT 5.3.0 meets this requirement.
Create a patch that updates the drupalwxt/wxt 5.3.0 composer.json file.
| Comment | File | Size | Author |
|---|---|---|---|
| #5 | 3486431-group-version-unsupported-2.patch | 566 bytes | gturnbull |
| #2 | 3486431-group-version-unsupported.patch | 478 bytes | gturnbull |
Show commandsStart within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
compare
Comments
Comment #2
gturnbull commentedHere is a patch.
Comment #3
gturnbull commentedComment #4
gturnbull commentedComment #5
gturnbull commentedHere is an updated patch.
Group (drupal/group) 2.3.0 requires Flexible Permissions (drupal/flexible_permissions) 2.0, which is also required by Drupal WXT (drupalwxt/wxt ) 5.3.0.
I was able to determine this by running the following composer command:
composer why drupal/flexible_permissions
Results returned:
Comment #6
joseph.olstadOn one of the projects I work on that relies heavily on the group module we've overridden the group requirement with version 3. Version 3 has a concept of insider and outsider roles, once you figure that part out it's pretty straight forward. Works well!
Comment #7
smulvih2The
drupal/groupanddrupal/flexible_permissionsmodules have both been upgraded in 6.1.x as per #5.Comment #9
smulvih2This has also been merged with 5.4.x, all tests passing.